ElastiCache clusters should have automatic minor version upgrades enabled
Checks that node-based ElastiCache (Redis OSS) cache clusters, including the nodes of a replication group, have automatic minor version upgrades turned on, so minor engine versions, which can carry security patches and bug fixes, are applied without a manual upgrade.
- service
- ElastiCache
- severity
- High
- scope
- evaluated in every region
How to fix it
- Interrupts service: Upgrades then apply in the maintenance window, where a cluster with no replica to fail over to is unavailable while its node is replaced.
In the console
ElastiCache → the cache → Modify → Maintenance → Auto upgrade minor versions
- Auto upgrade minor versions
- Enable; the setting is disabled below Redis OSS 6.0, so raise the engine version first on an older cluster
- Maintenance Window
- The quietest hours, since upgrades are applied then
With the AWS CLI
aws elasticache modify-cache-cluster --cache-cluster-id <cache-cluster-id> --auto-minor-version-upgrade --region <region>With Terraform
resource "aws_elasticache_cluster" "this" {
cluster_id = var.cluster_id
engine = "redis"
auto_minor_version_upgrade = true
}
See which of your accounts this check is failing on.
Book a live scan